Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ZHtxXXRvNjSu48iFgWiNxHa7HHw.roa
File:                     ZHtxXXRvNjSu48iFgWiNxHa7HHw.roa (raw, json)
Hash identifier:          F9V00TInywEg4tt/s5IPYTc3wU+fZBLZTS8qgBXrfag=
Subject key identifier:   64:7B:71:5D:74:6F:36:34:AE:E3:C8:85:81:68:8D:C4:76:BB:1C:7C
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       359CEBB6
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ZHtxXXRvNjSu48iFgWiNxHa7HHw.roa
Signing time:             Sat 01 Jan 2022 08:54:52 +0000
ROA not before:           Sat 01 Jan 2022 08:54:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30952
IP address blocks:        80.79.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899476406 (0x359cebb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  1 08:54:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=647b715d746f3634aee3c88581688dc476bb1c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:2f:2f:f3:a0:27:71:e6:3d:c6:f8:55:f6:
                    d8:99:fc:78:57:33:54:cf:11:90:28:8c:e5:71:20:
                    f6:5e:05:27:b5:16:fc:66:b4:f0:98:b7:75:1b:97:
                    7b:1e:70:3b:b2:dd:0d:05:3f:e0:ac:5c:9f:14:13:
                    e0:6f:b2:94:87:e3:77:82:7e:49:17:40:9a:ac:eb:
                    1c:b6:49:18:38:6b:8a:84:d0:fb:99:cd:42:47:74:
                    f7:98:ea:9b:6c:fb:85:24:3d:98:bc:e5:de:d8:e2:
                    66:05:70:55:2c:d0:81:b6:c0:01:58:3f:22:8d:9e:
                    42:eb:66:12:79:5d:55:15:4f:4c:1b:82:ee:27:75:
                    22:d6:d7:a7:7f:c8:8d:b3:3c:07:0f:3d:b1:d7:ef:
                    de:ff:36:b5:8c:ef:67:90:a4:53:51:72:ad:95:02:
                    9b:b8:e4:e9:4c:7e:02:65:08:05:1b:60:fc:72:e3:
                    38:af:1d:a1:2a:94:d9:2e:65:74:d9:b9:cf:83:50:
                    68:b8:48:07:ee:aa:a7:19:7a:46:f1:3f:93:90:7a:
                    82:ea:e5:49:a6:32:2d:4d:89:48:18:98:13:78:65:
                    d1:e4:79:61:a7:93:45:15:40:30:0f:d6:86:89:82:
                    cb:5c:d5:0a:a7:94:a4:45:ca:d0:ee:a1:45:8d:22:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7B:71:5D:74:6F:36:34:AE:E3:C8:85:81:68:8D:C4:76:BB:1C:7C
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/ZHtxXXRvNjSu48iFgWiNxHa7HHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.79.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:7d:4f:e4:94:27:4e:74:66:7f:cc:4e:e3:36:ee:19:67:d7:
         b9:59:75:cb:f2:17:82:3a:f9:16:f9:00:29:7c:39:fc:3a:da:
         6d:7c:71:8e:d4:f3:e5:60:40:3f:6c:19:5a:ff:60:61:99:cb:
         53:a6:12:a0:64:f4:d6:f6:49:d3:7e:26:f6:cc:a1:b2:cb:0f:
         66:35:55:2f:c4:9e:a0:e3:a0:33:bc:42:c8:0b:db:45:dc:e3:
         b1:10:78:b5:b8:7f:f8:58:d5:bf:45:22:5b:c4:64:53:bd:b1:
         78:c6:55:3a:a4:02:f5:90:f5:48:ba:8f:26:fc:fd:fa:1f:71:
         5b:32:b2:25:d2:e3:37:7e:bf:d0:83:98:50:41:fc:38:f5:9b:
         75:9d:eb:0f:4c:95:e9:49:a8:17:64:44:e2:96:d9:06:e1:86:
         e5:c1:42:83:37:b5:4c:ea:55:f6:b9:a2:59:d5:a3:90:70:68:
         80:62:9f:11:40:21:fe:22:4e:65:3e:a2:45:1d:4b:ad:93:d2:
         20:a5:46:87:26:38:f4:41:ba:b8:18:f0:2d:9f:2d:dd:e0:3a:
         51:4c:9a:79:54:4a:cf:10:04:58:30:b3:28:12:c7:5b:ac:2f:
         4d:d4:fc:8f:53:a0:60:16:4d:9e:2b:84:db:85:39:f1:36:8a:
         fd:56:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:41 2024 by rpki-client on console-ams.rpki-client.org